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searches DNS to acquire an IP address of a VPN gateway device, generates a common key used for authentication and encrypted 
communication between the VPN client device and the VPN gateway device, transmits the IP address of the VPN gateway device, 
the private IP address of the communication device, and the common key to the VPN client device, and transmits the IP address of 
the VPN client device and the common key to the VPN gateway device. 
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-fZo £fc> VPNy— M>ai^B(B)103^*r-f *VPN^7>TT>'h^fK(D)102©r^ 
*^MliR«HW#Pi-S»&J!lW:, VPN^*— hi>a^S«(B)103<^IPTK^ 
IPADDRESS.B^^-TS/cfecODNS^yQUERY, §£SIG_D, SPKI^Mi - ?)^^ 
f ^ F^m4S.W#f ! F^5^C*3V^T^a$^ra»CERT, &t>\ T^ir^^hP 
— ^y^MACDSrA^Jb-C, SPKlKm-tZ&WWXBi^ &t>\ ftimjtt5\z*s 
V^T^$tv55-tuple reductioniB3fai!| % RTf/tHtte, 4-tuple reductionist. 



WO 2005/004418 



14 



r CT/JP2004/009446 



[0026] £fc, ±$&m£.f£^m04m, VPN^7-l'T^h^tt(A)101tVPNy— bv^mw. 
(B)103i:©MOIKE73i— XltcS3»t5BtEmfflV»S*ii«KEYj\B, £fcte, VPN^ 
7-rT^^e(D)102^VPNy— h!>a:>r^il(B)103i:OlW©IKE73i— XltqjsttS 

^SEt-ffl v ^KEY.DB^tt^e n^-r 5 0 

VPN^^T>-hmtt(A)101fi v SPKI^{^oT, VPN^-fT^h^g(D) 
102^UtKS8iOlEM»CERT*38fT"t-S«tMSrW-rSo SPKI^ili-^^#fF 
^r^4^t^^#^^5^*3V >Tt±, ltPStI0J# (Authorization Certificate) <h£ Su 
HEPJ»(Name Certificate) <7)2^(D|E0^#{CoV>Xv -tiT/PtL^teSr^glbTV ^ 
So *HJfi^J^*3V^tt, tftW^lfrte^Sfc*^ BE0^#CERTfi*iPS!I0^»cD 

[0027] iailti*llffi0tJ^*5»tStiEM»CERT©^#:0!ISr^-t- o SPKI^M-t-S^^A 

'Ammt.tcfc^(D/£mm<Ds^>x.m&mm^z>issuer7j—ji'b\ tim<Dn&&. 

m<Dy^yU^m^mir^sxibiecty^/Ub\ ^Pg|^£:^Lfc;£^iJ£^tnag 
h\ ItPSfEW^OW^WraSr^Ufc^^iJ^tPvalidity^^— /H^btH 

^tt^x-^c^m, ^-^$riiE0j»'ff^iNFot^)^Mu &nm<r>mm 

[0028] r©^«|^S<5# % ***WtC^»t5KM»CERT©mM»««INFOJJ:*5»tS 
issuer^— ^K^iS« N |EKS1f^INFOO|gtT#W^5B«iPUBLICKEYJK*fc« 
^sCD/^^^^^T/^yXA(CiS^^iiPUBLICKEY^(D/N^^#:HASH_A 

PUBLICKEY_D*fc{iftl:(^xNs/v'3.^^T^yXA^J;^MSiPUBLICKEY_D 
(D/NiyV^fSHASH.D-^fe^^^a-rSo tag^— A-K^tte, VPN<^— h^^-f^S 
(B)103(^IPTK^IPADDRESS_B«rtfe^i _ Sfe*<ODNS ^U^fFnT-f SfcfeOf* 
fctt, VPN^—b9^mm(B)103<D^mm PUBLICKEY.B £fc 
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fc&n<Ds^y^x.m%T/VziyXM^Z.Z><£:M^ PUBLICKEY_B Os^yiSaML 
HASH.B fr£ttb1rZ> 0 delegation^— yWK©fit«\ #M$tf:fci6fc4i£:i8^T3£l££ 
JxSlfc^JVopagate'^fcSfcJ^-f-So — validity"^— /VKOffitt, 

[oo29] 02Sr#'Raur, m\<Dmwwm*mm-rz>o r?±x=»hv—MACL)6& 

.»(fSfft)R^ VPNy-h^^^fi(B)103fi > 4^BB«iPUBLICKEY_B(*/c«^:<D 

^^S(S)l04f«^5fl«iPUBLICKEY_B (£fc.t«rtf>HASH_B) ^T^lr^^n 
*-/WACL)SrlB1ft-t-S„ 

VPNy-h^^-r^fi(B)103^S LT, VPN^7^T^h^g(A)l01^>bii{f ^ 
g(C)l 1 1 WPsech^M^e— Kte£5!J*— hVPN-SrHfrf-S^, VPN^^TVh 
^g(A)101tt\ ^M«PUBUCKEYJ\W*M«PUBLICKEY3 (Xfi^OHASH_At 
HASH_B)«T#^^*(S)104lC^f LT, VPN^— h!>^^e(B)103R^iijf m 

m(oiPTvu^<Dmmm^nti:o (^x^s2) 0 

[0030] fa4M£g(S)104tt % SPKI^^J^oTVPN^^T^hSeO^lOKOT^-fe^ttl 
KflJfll&ISfTU T?±x%f?*i1-Z>m&ia-3:. KpHV*— (DNS)105£ 
tfe^LTVPN^— h!>^^-R(B)103tCfiJi9 H$ Tfb*LfcIPTHV*IPADDRESS_B£& 
#i-3(*xy:/S3) 0 ft^(S)104te, T^i?*=:/bP— /HACL)%#j8LT, 
VPN^- h*^£§g(B)103t£ « W S^ftSLAN 1 lOfc^Sftfcfflflr £sg(C) 1 1 
lfcHUS-rtixyt^^— MPTK^IPADDRESS_Ctr^#i-5o £<b^ 
g(S) 1 04 ft , VPN^^T >-b^fi(A) 1 0 1 1 <D ffl (DfgfEfc ffl V ^3 *i§^KEY_AB£r£ 
JG^i-So ^UT, ft»4H£«(S)104fi*, VPN^7>TTVh^g(A)101^M«i 
PUBLICKKEY_A^oT^^»(S)104i:VPN^^^TVh^e(A)101^(DracOai 

flMSSrlfiWbU VPN^-fT>'h^g(A)101'MPADDRESS_B> IPADDRESS.C&U* 
*ililKEYJ\B&^f «(*tWS4) 0 *fc, fa^g(S)104te, VPN^— hp* 
^g(B)103(D^MSiPUBLICKEY_B^oX#^^g(S)104^VPN^— 
^g(B)103^O^OiiififS^Bt^t:L, VPN^-hr>^-r^g(B)103-- 
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IPADDRESS_AiKEY_AB£r]£Hlt'"f"<5 (^V^-yZfSb) 0 £*UC«fc»K VPN^-fT^hglfi 
(A) 10 1 tVPN?— h^x^gf(B) 1 03 ffl (**il#KEY_AB^o X^^ZMim 

^y^^nbn^UT L2TP„ PPTP ftWW©:Tnb:3/W&JSv\/t9» fl2ggl2Elf 
#^rLT, ID, s<X7*-h\ &M<Dmm* SPKI OttlRIEMVi^teO^aottf #fc 

[0031] VPN^^r^b^g(A)101^VPNy-h^ai^g(B)l03roiPrK^^^^-S 
«tPS«rVPN^7^T>'h^«(D)102^S|-rS^«, VPN*7>r7VH£B(D)102te: 
^LTSPKI^^oTlE^#CERT^m«(^X^S6) 0 VPN^^T^h^ 
S(D)102{4, <£TOPUBLICKEY_D£CERT N &t^M»UBLICKEY_B 
<£>HASH_B) Sr#^Sfli(S)104fc36li bT, VPNy-h?^£B(B)103&tWf 
3£B(C)OIPTKl^*0)l&3liIl3fc&fT &5 {^r^S7) 0 

vmm&mnu 7?±x&ff*s-rz>m&ta^ k^mv*~-m--^(dns)io5& 

^^UTVPNy— h!>^-Y^g(B)103^fiJi9^-r^tl/fcIPTKl/^IPADDRESS_B ; l:^ 
#i-5(^^^S8) 0 ft»4H£fi(S)104fi, T^-fe^a^hn— /KACL)S:#fiab 
T % VPNy-hT}^4mU(B)103iZ£iQ'gmt5tlZ>LANl lO^ij^nfciiff 3£fi 
(Olll^J^^T^^c^-r^— MPTKlx^lPADDRESS_C^#i-5o 
fa4H6«(S)104«u VPN^-YT>-h^fi(D)102i:<75^cOMiiE^fflV^*3iSi 
KEY.DBSr^-rS 0 ^bT, ft»^3£e(S)104tt\ VPN^rTVH£»(D)102<£>4* 
PliiPUBLICKEY_D^oT{4 J ^^fi(S)104^VPN^^-('r>'h^B(D)102t(0^cD 
Jiff B&SrBf-S-fbU VPN^-fT>-hi£g(D)102-MPADDRESS_B, IPADDRESS.C& 
tf*iMKEY_DB£i£<f t5(^y^S9), *fc, ft>4H£S(S)104W\ VPN^-h? 
^^B(B)103©^r ? fl|iPUBLICKEY_B^oTf4 ] ^^B(S)104iVPNy— 
^B(B)103i:^^OiiffiS§^^kb,VPNy-h!>^^fi(B)103- 
IPADDRESS_D^KEY.DB$r^fr6(^7 i ^10) o £*tK:«W, VPN^-fT^h^fi 
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[0032] ® ltc^i-v^Aw^smo^x^frotbf^m^SfiB^fcds,- w 

'^^-h^— K*^i4h^^-KtcJ;5aift KOBff#^&, *ii^KEY_AB& 
tfKEYJDBO^j&^ife. ^r?SliMV^c^fii^^^oV^T}i, 33!l#fc 

[0033] ^T(-> ^^JS^Jl ^*5tt?)T^-tr^=i^hn-^y^h (ACL) cD|E'tt#JiR, SOTP 
-T5 0 £i\ II]5£#i$LT, T^ir^^bP-^y^MACL) ^{+iTr^*(S) fcfE« 

VPNy— h^x.-T^g(B)103i^^^e(S)104« > IPsecb^^— h*— blz£V 

nfflnmm mm ^it^^o vpNy-h^^tt(B)io3tt, ^it^t^mm 

SS&ffl V ^T, ^ W^lPUBLICKEY_BiSKPI^^:cDT^-fe^=i^hn— ^y^h(ACL) (HI 
8)$riHfS1-5(^X^l002) 0 #^^(S)104fi, VPNy-hh^^^fi(B)103 
^^^f^n^SI^PUBLICKEY3tT^ir^=i>'ha~/wy^h(ACL)^S:{fb-C, 
I^Sifb/ci^lfl^PUBLlCKEY.BirT^ir^ri^hn— ^y^h(ACL)^Hii-^^-C|B 
^6(^X5/^1003). VPN^-h">^S«(B)103^^^S(S)104«, g^&r 
WWi-fZ (^^1004) 0 
[0034] &*3 % jttj^VPN^— bV^mU(B)l03iZ.tt1-Z>T?±X=i>'bv>- /wy^h(ACL) 
^WS^-51tPS^^^VPNy-^^1fSI^«(M)ll2^^c^f4, 
^L/cT^ir^^^hn— /vy^KACL)(D^^#JllM}^ioV>T, VPNy— h^zn-f^a 

(B)103^J:6^S{^T, VPNy— b^^W^fi(M)112^J;f9^$^ 0 
iSfc^ [H6^.^|gl7^#mb-C, fl^3g«(S)104;&S, VPN^^-TT^h^«(A)101^ 
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fi(B)103tCf>J<9 ^ T^tT/fcIPTKl/^IPADDRESS.B; Mit Sfi(C)^§W ^ XhtltL 
Zf?^— MPTKl/^IPADDRESS.CxS.TJ ? *ii^KEYj\B^VPN^7-<TVh^g 
(AnOl^^f U *fc, VPN^-fTVb^«(A)l01^fiJ«9STbnfcIPrK^ 
IPADDRESS.A, VPN^-fT^h^g^JS'telf ^ATTRIBUTE.A&TJ^ 

[0035] |H6^joV>T % VPN^^T>'h^ft(A)101^#^^«(S)104(i > IPsech^^—h 

^—vKx^mm-r^i^^iioDo -r^^, vpn^^t>-^«(a)ioih4 i 

^^B(S)104^(Dr H 1(D^f SS^Bf^^^o VPN^9^T^h^g(A)101{i, Bf 
-§-fb$Hfc3iffSS5rfflVNT, VPN^— h?^^S(B)103O<kP^PUBLICKEY_B 
^tfDNS^^y QUERY, RXP, VPN^4T^hBU(A)101(D<ikmm 
PUBLICKEY_A£^f 102) „ 

^^B(S)104«.'VPN^-rTVh^g(A)101lCfiJi9^Tf>nfciIPTHV^ 

IPADDRESS.A, WPH^—Y^^UWiB)\03\zM\^Xhntc\PTY^^ 
IPADDRESS.B , VPN^ — YV^gkWiB) 1 03 \Z X Y) WS^tvSLAN 1 1 0 KWffifefllt 
m\t 3£B(C)1 1 1 \zMK) m Xhtltc^y^— MPTKW;*IPADDRESS_GK. WPN* 
7-TT^h^fi(A) 101 #ATTRIBUTE_AS:&#U VPN^^T^h^BCA) 

101tVPN<^— h^^^g(B)103i!(Dr^<7)IKE^O^|iE^fflV^*ii#KEY_ABSr 
^J5fei~5 (^y^l 103) o mm^yZfl 10Z<DWM®iMyv— X&>Z> 0 

[0036] Emc&l^T, #4M£e(S)104tt, VPN^^T>-b^@(A)101;^ibi£{f £;ft,fc 

DNS^^!JQUERYi:^P#PUBLICKEYj^^jfbTA^-r?)(^X5/7 0 1201) o & 
iZ, A^b/cDNS^^yQUERYSr^^LT^MiiPUBLICKEY_BSrSl!5l±i-r iT^ry? 
1202) o JJcU:, ^ffiLfc&M&PUBLICKEY.BSr^^ WiStttt^fcT^I?;^ 
>-hn— /HJ^h(ACL)Sr^t#-t-5 (^^1203) o T^lr^a^hn— ;HW(ACL)te 
08^^i~^^;S:i:5o ^^1201fd*5V^-CA^7LfcDNS^yQUERYSrffl 
V N ~C> Eigt^-r^^cD^— ^TAGSr^-f S {.Z&yfl 204) 0 

[0037] fa^S(S)104te\ _h|E^v i ^^ P 1201^^3V^TA^bfc:^^iiPUBLICKEY_A < ^ 
??ry-f\ 204(djoV ^T^fifeU^'X — ^TAGir^T'^T"! 203^*5 V >T^#UfcT^-fe 
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(Dy*—?X&>Z> 0 &%1fe$k l f— ^DATAOsubject^— ;\sY<D^.&7sr»/Zf\2.0\\Z. 
^V^^{tb7t^^€iPUBLICKEYj\OSHA-lT/V=^yXA^J;^^S/v^3.1B: 
HASHj\fc^^— ScL-CV>5ACL^VM;^, *TyZf\203\Z.&^XM%Vfc.T? J t 
^3^bu— />y^MACL)^^ttS^^^Pl«5, BIIO^CO^— ^DATA^)tag^~ 
^K^«E19C0T f -^TAGt^-ifi:-r55:^iJ^^^ o 

[0038] ^^^B(S)104«, m^$tlfclHlO^)7 i -^DATAOtag7^-^K^#^LT, 
DNS^yQUERY'%^-t"5 (^5/^1207)0 DNS^U QUERY ' StKtMV 

^-Af-/*! (DNS)105^^LT^^b > IPTK^IPADDRESS_B^^#1-§ 
^5/^°1208) 0 ^M^PUBLICKEY^^N^^3.fitHASH_A^^^T^-fe^3 
>^hn— /HWACLSr^^U (subject^'-/^K(0'^^t^c:/^-/^^^tHASH_At^^:— 
15:-t-?)^:^iJ^tf(ACL)^^MJENTRY^^#-r?) (^5/^1 209) o 
7"1 209{C*3V ^T&#LfcACL^hy ENTRYcDtag^— /VKSf#BS.LT, ^-f^ 
— hIPTK^IPADDRESS.CXt5JRi4ffirfRATTRIBUTEj\S:5l#i-5 {?rrv~7\2\ 
0)o VPNi7^T^h^tt(A)101<7)IPTKW^IPADDRESS^^#-r^)(^5/ 
^1211)0 Jfcfc, *a^KEY_AB^r^i-6 (^^1212)0 

[0039] I36^M«9, f*^S(S)104te, ^s^llOltefclvTHF -^fc^fcilfi 

WC, _LfE&#LfcIPTKW*IPADDRESS_Bx zf?^— MPTKWMPADDRESS.C, 
&U\ ^Ufc*iiHKEY_AB^VPN^^^T^bS*(A)101 fcj£fl|-*-.5 C^T^l 

i04) o ^-rr^h^(A)ioiH4'^«(s)io4(* > mmzwrn-rzi^y 

yil05) 0 

VPN^— h«/WS6«(B)103£#^3gB(S)104W: % IPsecl^^zK— He— K 
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(S)104i:<£>fTOiHf KiSflf-^k^iVBo #^§61KS)104H:, ^x^^H06(C 
*3V>-CBf^k$iXfc:ii{f S&£fflV>T, 3fcfc##bfcIPTKW';*lPADDRESS_A, JRtt 
til^TTRIBUTRART*, ^fe^T^L/c*ii^KEY.AB^VPNy- (B) 
103l£j£ff -fS (^5/^1 107) 0 VPNy-b^^^g(B)l03M4 ] ^S(S) 

104{i N Sa*«JWrt-S(^y7 p ii08) o 
[0040] ^<£>^ 02^^bfc<t9^VPN^-h^^^g(B)lO3^SbT, ^fTVh3S 
»(A)10l36^iifS^S(Olll^IPsech^/W^— KfcfcSlJ**- hT^-fe-XVPN^S 

tfcfcl, VPN^^T>'h^g(A)101^*DVNTliEBJ#CERT^ttb > ^frb/cBE^ 
#CERT^VPN^^T^b^g(D)l02(C^-r^)lH^^T^^-r o &*5, ^eo^yss 

(1) vpn*^7>hM(a)ioiw:, sPKi^{z:SoV^T^$ttfci^:j*{^v^, se^ 

*CERT05liEW#ffiP«lINFOSr^i-S o ^HJfe^!jlC*5Jt5tiEK#CERT(D|li!6^| 
Srigilfc^fo BIll^WC, iE^iifftlNFOtC&ttSissuery^— A'KWffitt* 

-?&>Z>bl£m-fZ>o subject:^— /VKOff ^MliPUBLICKEY.DcDSHA-l 

n VPN^-h^^^gB^#J«9 ^T? 5 nfcIPTK^IPADDRESS_B'efe§i:^Si--5 
o J^o, delegation^— ^K^fttf*. ^#fF^C^5^*5VNT^^$n5^:^iJ 
"propagate^-CfeSi^a-rSo — *\ validity^— /VKOfltte, ^B^t^iH^P^ 

(2) vpn^^t^^«(a)ioi^ > ±is(d ^^x^mj-z.f—^m^m 

PRIVATEKEY_A£fflV ^Xm^-T^tK^), EEBJ^CERTSr^fT-TSo 

(3) VPN^M'T>Hg|»(A)10m, _LfS(2) ^*3V>T^UfcfiE0^»CERT^ic 

^>#^-evpN^^r^h^«(D)i02^-r-<-c^f-r5 o 

(4) VPN^^T^^«(D)102«,VPN^^TVh^tt(A)101^^^f$^fcIiEBJ 
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[0041] fa^g(S)104# x VPN^-fT^H£S(D)102£VPNy— K^-l1£g(B)103£ 
IPADDRESS.B, ^9^— MPTKWMPADDRESS.C, *i§ttKEY_DB£VPN 

fcIPTKl/^IPADDRESS.D, VPN^^T^h^gCAjlOicDS+i'tt^ATTRIBUTE.A 
. s S.U ? *il^KEY_DB^rVPNy— h!>3i^g(B)103^^f i"5#Jffi«, 3feW|H6S. 
tJ ? [ll7^feV^Ti^0Jbfc#^^«(S)^^ VPN^^T>-h^e(A)101^VPNy-h^ 
3i^ff(B)l03^(D^(D*iiilKEY.AB$r^b'Xs IPTKU*IPADDRESS_B> ^7 
MPTKl^IPADDRESS.a RTfi* *ii^KEY_AB^VPN^9^T^b^S(A)l 
Ol^igffU £fc, IPTK^IPADDRESS.A, JSt£1f $gATTRIBUTE_A, SU^iiSI 
KEY.AB^VPN^-h'>W^S(B)103^^f-r6#JlS^I^^(D#j[lSTllJSX*t^o 
[0042] Z(DXoKVX, ®2{d^bfc<t5^, VPN^— ^^^«(B)103^SbT> VPN 

^7-l'T^h^B(D)102*^t>3l{f^m(C)lll^IPsech^/^~K^J:5)y^— h 
T^-fe^VPN^^fT-t-5ri^pJtg^^§ 0 

^_B£-<fc£9^ *HM^J^*5V^, #iTr^S(S)104«, VPNl?~-h<?^mW 

(C)l 1 1 ^#J«9 ^ Tbtvfc^-f-<— MPTK^IPADDRESS_C^IBlgi-?)o ^tU^J: 
ot, fa;fti£©(S)104te:, VPN^— h^3i^g(B)103^:tt^^goTV^^ n— 

^yr^^h!?-^ (lan) i lo^^nfciiff mmcn 1 1 w ^xbtitc^j 

MPTHV^IPADDRESS_C^6ri:^-e^§ 0 fct, VPN^7^T>h§£ff(A)l 
01 tt, VPNy— h^^^fi(B)103S:^bfcii'ff^S(C)lll^OIPsechV^ ; e— 
K^^U^E-- hT^ir^VPN(C^g^^^<— MPTKl^IPADDRESS.C^ 
hT^^VPN*||fT^SM^^«(s)i04^rav^fei3rSr^j2:<tt)^iSrtds 

[0043] *mMWK&i< >T\ #^3g«(S)104tt, #aI«KEYj\B£±JE(fcU £/&bfc 

*ii#KEY_AB£:VPN^-fT ^h^*(A)l 0 1 fcVPNy— h?oi>f^tt(B)l 03tf)M# 

ic^it -r?>o r^(-<toT> vpN^7^r^hg«(A)ioitvpN^— \>v^mmB)io 

3f2£1>^*ji#KEY_AB£gff -T?#5 0 tot, VPN^7-TT^h^*(A)101^VPN 
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«(C)1 1 1 MfiJ<9 S TbtLfc^^-MPTKU-XIPADDRESS.C^^+^gCSjlO 

^S(B)103^^3^$Hfc7°^^<— HPTK^IPADDRESS_Ctc:|St)i5«-e#5o 
tot, VPN^7^T^b^tt(A)101fi. ELVWPNy— h^*^«(B)10 33i!^j2l 
ff^tLfc^^—MPTKU^IPADDRESS.C^S^^^S-CtSo 
[0044] *HJfeM^*3V>T, ft>4H£S(S)104fiJ:, VPN^— h^^«(B)103£fgfIE 

U mm^^-kM^KW), VPNy-b^^^«(B)l03J;i9^ffi$tbfc, iifs 3£ 
S(C)1 1 1 ^ TbtLfc^-T-<-HPTKl/^IPADDRESS_C^lElt-t-5tV ^ W) 
f^C&^T, ^iff^ff(S)104^VPN^— ht^mmB)103b(Dm?>mit& : £Bg J %- 

ikirz> 0 itimot, #^B(s)i04«\ vPNy-h?rn.^B(B)io3^(bi£{f £ 

titc, mmmmicm i iciw ^ Tbnfc^^-HPTK^iPADDREss.c^efc^ 

(A)101te, IEbVWPNy-l>^^^fi(B)103^^^f $tt/c, il{f iSSCOllKC 
Pl<O^XhntclE^^^-<— HPTHV^IPADDRESS_C^5wt^-c^^ 0 
VPN^-h^^^fi(B)103. iMf §£S(C)1 1 1 tCfW STibtvfciELV ^-f-<-h 
lPTK^lPADDRESSX^^#^#m^^Pfen?.rt^<#^^«(S)104^^f-C 

[0045] ;£fi«!lK::i3V>T, f4 I ^^tt(S)104{i, VPN^y-fT>-h^«(A)l01 

&1BIIEU ^Hm^jLfc^^Pgip, VPNy-hr>^-r^«(B)l03}ClfiJi9^TP5^ 
fcIPTKU^IPADDRESS.B^K^^^— AiJ— ^ (DNSUOS^V ^fr-frT&#L 
. *ii#KEY_AB££/&U &#LfcIPTKl^IPADDRESS_B^ iilf ^*(C)lll{d 
fiJ<9^T^fcIPTK^IPADDRESS_C> £j&Wt*i§^KEY_AB£r1-'<T 
VPN^-fT^h^fi(A)101^^f -rZ>h^0W)\ttW<T-tZ>o ZthKX^T, wfrm 

g(s)io4«, vPN?74Ti/ymm(A)ioi&wmztix\<^d:^m&fcm<9. vpn^- 
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W^mmB)103iZ.mV% XhfhtcA PT KV-^I PAD D RESS_B % iHf §£fi(C)l 1 WZ. 
WO^X^int^f^^— MPTKl/*IPADDRESS_C> RTf, *jI3gKEY_AB<£>-f-'< 
T^VPN^7-rTVh^g(A)101{C3^f T-#5 0 «ot, lEl^YPN^-fTVh^B 
(A)101^PS<9 > VPN>f— b^-fSB(B)103£^LT, ffiff i£«(C)lll£lPsech^ 
yu^e— K^i^y^e— hT^ir^VPN^rll^TT^^o 
[0046] *mMfflfc35\,^X, #^tt(S)104te, VPN^7>f T^h^B(A)l01^vPN 

b^oc^tt(B)103^fiJ9STbnfcIPTK^IPADDRESSlB^M^-r6tiPS^ 

^ltv^^^j^u mm^\^x^m^Kwo: vpnf-vv^mwim 

03(d#J«9 ^ TbtbfcIPTKV^IPADDRESS.B^K^^— ivtf— ^ (DNS)105lcF^ 
w£frii:T&#U 5&iI^KEY_AB££j&U ^^#L^iIPTKI^^-IPADDRESS_Bn ol 
m^«(C)lll^fiJ'?^-t^fcIPTKl/^IPADDRESS.C, 3£J&Lfc*ii@ 
KEY^B^^TVPN^^T>'h^«(A)101^^f-rSi:VN51t)^^^tTi-So C.fl 
iaot, ^^^tt(S)104«, VPNy-h^^-rgg(B)103iCfiJi9STfetLfcIPTK 
^IPADDRESS.B. m\WmW{C)lll\zm^Xhfltz^^^<—U?TY^ 
IPADDRESS.Cx RXI, ^ii^KEY_ABtf>1--<T£, VPN^-hr>a:-f =gg(B)103, R 
t>\ 3am^fi(C)l 1 1 (C^Ufcib^-Ci6T^-fe^li|5I^W-f-^VPN^^T^h^ff (A) 
lOltdmz.mmXZZo tot, VPNy-N'>^^S(B)103, &tJ^ iilf^ff(C)l 
lKc^j-r^, ^#^#^^OIPsech^/^— K^i^U^—hT^-fe^VPN^P^ 

[0047] *mMmiZ.to\,^X^ ft>^S(S)104«U {t^§£ff(S)104£VPN^M'T>'h 

^S(A)101^(Or H lOii{f #te-r5o -tU^oT, ft^£l»(S)104te, VPN^ 
— h^-r^a(B)103{CfiJi9 ^ T^fcIPTKWUPADDRESS.B^ iIfsl£g(C)l 1 1 
KmV^XhfttzZfy^^— HPTKWUPADDRESS.C, *«KEY_AB&& 
g/viStlZ>Z-bt£<. ;0>O, M$H5wt^<VPN^^T^h^g(A)101^^f-e# 
So fct, VPN^-rT^HMCAHOlte, jELVWPNy— ^i-figS(B)103£^ 
LT, IEU\iHf ^e(Oll It, IPsech^/^— K^«t5y^— hT^ir^VPN^H 

[0048] *fc, ^MJSWc&V^T, ft^ig?S(S)104te x VPNy-h-> ; n-r^«(B)103^sE 
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u mmzf&?bi,tcm&iz.m. vpNt^T^mmwioiizm^xtbtittiPT}? 

l^IPADDRESS_A, Jlttffi #ATTRIBUTEJK, S.O t *ii^KEY_AB?rVPNy— 

(A)l01}CfiJi9^T^ixfcIPTK^IPADDRESS.A, JSttlf £RATTRIBUTE_A, X-tf 
*ii#KEY_AB^rVPNy— b?W^«(B)103&^§ T*££ 0 ^ot, VPN^-fT^ 
h^«(A)101«, ELVWPNy-h?^gg(B)103£^LT, ilff §£ff(C)lll£ 
IPsech^^-K^i^y^-hT^ir^VPN^litTT'#S^V^^)m/5 s #'btL5 0 
[0049] £fc, *mMWlZ&\,^X, #^»(S)104« > VPN^-h'> 3 i-r^B(B)103?:miiE 
U fPEto£^bfc|§£i;:PS9> VPN^^T>-h^g(A)101tCfiJi9ST^fcIPTK 
l^IPADDRESS_A N JR'|41t$BATTRIBUTE_A > &TmiI^KEY_AB£rVPNy— b?:r: 
^S(B)103t^fr^tV>5Iljf^{-^V^,^^*(S)104i:VPN^-h^^^ 

tt(B)lO3tcoW^ii^f%0t^-r5iv^5i^I^^M^T«c rtuc^oT, 

(S)104«\ VPN^^-rTVh^fi(A)101(CfiJi9 MSTib*lfcIPTKwqPADDRESS_A. 
JRtetit #ATTRIBUTE_A, &tf*M^KEYj\B£i-^T&^£*v5;Lt&C j&>o, 
M£*l5w^KVPNy-h*^§£BBfr£i£^ t?#5„ ^ot, VPN^-h^^^ 
ff(B)103, RTf, mm igB(C)lllte, ELVWPN^-rr^h^*(A)101t, IPsech 

[0050] ^i&WcJoV^ ^^B(S)104«, SPKI^fit^oT, VPN^^TV 

h^g(A)101, RTf, VPNy-b^oc^^g(B)103^tiE-rS o m^ctoT, ^ 
m^^S*AttliE0^^^^fcfe, VPN^^T>-h^e(A)101^WPNy— 

*4mw(B) io3<Dm&thi*i\-mw(s) 1 04 h^hsme^ w&mm -r 

fet, VPN^7^T>-h^e(A)10lSWPNy— h^ni^ft(B)l03^^tl/ 

♦CERT^fTb, VPN^9^T>-h^a(D)102^^f -T5o ^tU-ioT, VPN^7 
-fT^b^*(A)101fi > VPN^^TVh^B(D)102^^J-bT, VPNy-h^7^^ffi 
(BjlOS^^JtJ^TejtLfcIPTK^IPADDRESS.B^^-t-'SltPS^SmTtSfcfe, 
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^lPADDRESS_BSrtfesjti-Sii:*S-e^5o iS^SCOlll^fiJDSTbn/t^ 

MPTK^IPADDRESS_C^*05r^^-e#6 o lot, VPN*7>f T^hgfi 
(D)l02^ x VPNy->^^SS(B)l03^UXii{f^«(C)lliaPsech^^ 

vPNy— hv~4mw (B)io3fiffe(ovPN^^-rTvh^g(D)io2^ov ^©ti* $8 

102*^©!;*— bT^"fe^VPN4rff RT-t"Swi:^s-e^5 0 fi£oT, VPN^— h^a^g 

[0051] &*3 % [Hi, m2iZ.7jk-fh*M>'*~- A-^— ^ (DNS) 105^*3 V>T> <kH^ 

PUBLICKEYJ^NyVa1itHASH3WPADDRESS3&MS^*tTWa-t-5«^, 
VPNy—h!> 3 i>r^«(B)l03(i^^«iPUBLICKEY_B»^^5/^1ttHASH_B^^b 
Trt^ ^^^v'3-'^^i:HASH.B^IPTHV^IPADDRESS_B?:K^'<^--i^f-— ^DNSM 
»»U !ll6^-r^Jlg(^-/yil02)^ % <^MIiPUBLICKEY_BOftlcro 

/N^^j^l[TyV^yX^^J;^^^V^filHASH_B^tfDNS^^lJQUERY^^H 

E|8^i-T^-fe^3Vha— /vy^KACL), 139^^-t-X^-^TAG, HllOlC 
^tHI^SOf- *DATA, &I>\ Ell^i-SiEK*CERT^*3V>-C, SHA-1T 

^l/Ob£l\, issuer^— ;^(Dm%^yi/^mHASH_A<DiXfrVlZ'£mm 
PUBLICKEY^\T-fe6t^LT^J:V\ subject^^f— ^K(D{jt^A^->^iit 

HASH.D (DiXfyty ^^M^PUBLICKEY.Dt^^LTt J:V \ ^M&HJfeL-Ob, 

sPK^cM«^#l^^^4S^#fF^m5^^ov^-c^a$tL5^I^^llJ^^o 
xmn~rz^tK£<9, T?±xmm\mvxm^^nftffimmbtiz> 0 sha-ita- 

x issuer^— /l-K^T>*subject7^—^K^^WIi^^5^<^T^-fe^=ivhn 
— ^y^bACL, 7 s ' — ^ 7 DATA > &TJ^ iiEI^*CERT<D^5£^o^T{3\ SPKI^WT 
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f8§-r^)o *^Sl£#V\ ll7lC^i-#)ll (^5/^1209) ^MIiPUBLICKEY_A^ 
S^UTT^ir^^^hD— /MWACL£1&s£U ACL^Vr-yENTRY&&#-f-£# 

[0052] £fc, EI2{C^ : rVPN^-rT^f>^tt(A)101^fi^n— ^UPTKW* 

IPADDRESSj\(D^^fiJi9 S TTV >5tfS, VPN^-f T>^«(A)1 01 iVPN^— h 
(B)103 fcO|HJ©IPSech^/we— KO-feyhTy^m, ##^^4, # 
#^mi^^t-^fe^fflV^ > VPN^^T^h^fi(A)101^LTn-^7Vaiy 

T*s/M7— ^LANrtO'ftE^^^— HPTKW^. VPNy— h^^g(B)lO 
3;5>ib©m^T»bft^#J9^TTk£V\ fa^S(S)104£VPN^^TVh=g 
S(A)101i:(7)r^^^^$^fcIPsech^^^-f^-KcDii{f{f§^iiUT > #f*F:£iSfc 
3}C^^?fe^^fflV^ > VPN^^T>'b^e(A)l01^b-Cn-^/^yT^h 
y— ^LANP fc 3(DfticcD'7 P ^-<— MPTKV-^^, i^mW(S)104^b<D^XW3^} 

> miE^^^^-efc5 o gii2^^M(D^^ix^A^^-f 0 mi2(c^ 

V^T, VPN*9>f7VH6fi(A)101, VPNy~h«>W^ff(B)103, fgfiEJl(CA) 106 
% YM^*— AiJ— /MDNS)105, RXf. ^^^a(S)104«V^-f^IP (Internet 
Protocol) ttot^j'h!7- ^ (WAN) 100iC^£*VCl^ o £fc, iHf^a(C)ll 
lteVPN^— b^^^B(B)103^y— h^^igfiir-t-^n— ^myr^-yM7— ^ 
(LAN)110{^^$nX^ o 

[0053] mi3te, mi2(Di£i$<Dmftzmw-tz>fctb<Dmx°foz> 0 ^umpsechv^^— 

Kt-^y^— hT^ir^VPN, ^UtelKE^— Xlt^t-SMB^^T, Mmm( 

ca) i06^mmmmmcEKT^m^-r^t^7jkvx^^ o ^xh, vpn^-tt 

>-hmW: (A)101 CD^hiS te<kHfi^PUBLICKEY_A (£fcJ2^<D/N;y v-^gHASH_A) 
, IPTKV*fiIPADDRESS_A, VPN^— K^^|gS(B)103(D^h^^|fl# 
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PUBLICKEY_B(*fcf2^S'v^i£HASH_BX IPTFV^f3:IPADDRESS_B, ifiif^B 
(C)l 1 KDT'y^— MPTK^{tIPADDRESS_C<tt"<5o 
[0054] . VPN^-fT>-h^e(A)101^fi]i9 ^T^nfcIPTKl/^IPADDRESS_A, Rrl, VPN 
y-^[>zIl^^e(B)l03^tlJ^^T^i^fcIPTK^IPADDRESS_B^iV^-f^^t ) IP^^ 
H7-^ (WAN) lOOrtT'-m^fct), ftic©#^l?fiJ«9^Tibn6o VPNV^hV^ 
^g(B)103(D<^MIiPUBLICKEY.B (£fcte^O/N-/^^[SHASH_B) £IPTKW*> 
IPADDRESS_B«K^V^— A-fr— (DNS)105^*dV vf— M^mMtttfX^mZ 

tuV^T^yYV— ^(LAN)llO^feVNX(Z)^— iirefc^ DHCP(Dynamic Host 
Configuration Protocol), IPCP(PPP IP control protocol) ^<D&M.<D^-fk%:¥R^^X 

mmz.-m*)^xhfrz> 0 

[0055] VPN^7-TT>h^«(A)101, VPNy— h^^^S(B)l03 > Xtf, #^^«(S)10 
4ft, ^-ffrl^ IPsech^^^K— h^tr— h\ *^{*. IPsech>-^/We— K^£9ii{f 
&9%f§rik1-Z>^gt$:^-tZ> 0 ^M^PUBLICKEYJKcD^^lt^PRIVATEKEY.A-e, 
VPN^-rT^h^gCAHOl^t^^o CERT_Ate, ^^#PRIVATEKEY_A^>pf 
<t^6^M^PUBLICKEYj\^ti>X.5O9^(D^|fl^fiE0J»T\MliE^(CA)lO6 
(DM#PRIVATEKEY_R-e^$tt, VPN^^TVh^BCAHOl^&f^tbS,, * 
fc, <^5fl|iPUBLICKEY_B^^^#PRlVATEKEY_B{*x VPN^— h<^^g(B)10 
3XU^th^) 0 CERT_B(i, |ft^PRIVATEKEY3£*te&52rl!fl$i 
PUBLICKEY_B^tpX.509^^^H|i|iEP^*T% I^C<lTOg(CA)106<DS^ 
#PRlVATEKEY_R-e^$n, yPNy—b^=c^mW.(B)103X^W^^ 0 UUMii 
CA)l06fi, PKl (Public Key Infrastructure) ^j&^I \ VPN^y-f T^h^B(A)10 
lCD^^|itI0J»CERT.A, VPNy-h^^^ff(B)lO3cD^^|iiIE0J# 
CERT.B^HE-r^o T^ir^^hn-^y^MACOte, <kHfl#i 
PUBLICKEY_AS.t>^^liPUBLICKEY_BCOiia^'^^-&^>PtUT, T" 1 ?^— HPT 
HV^IPADDRESS.CS. tKVPN^7^Tyhgf (A)l 0 1 (DMi41f #ATTRIBUTE_A£r 
Mil^ttfc^-^X, ^^lC(H8^|lI^t»5t^^, VPNy-M>^Stt(B) 
lOS^f^*!^ »^PRIVATEKEY_Ste % ft^^MSHCM-e^W^So 
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CERT.Stes ig^#PRIVATEKEY_Si:jttt^-5^M#iPUBLICKEY.S^tpX.509^ 
^(D^mmmMm-C, mUmiCA) 106tf>$8^PRIVATEKEY_R-e^£;t'U Wit 

[0056] wfrmm(s)io4<Dmf&tem3^i,tcmMMi iz&tfifafrmmsnoipmftk 
mm(A)Rw—h^^mm(B)(D^mmmmmcERT_A, cERT_B^x^xno^t 

^S(S)104^oV^T{illl3ilr#^-r6o 

IPTKW.Etf4M£l&1043te, DNSjj&.tm-ZthZ'O?*- ^yhfc&i-fZ— f&tfjfj: 
% HU^^^^^oT, ^M^PUBLICKEY_B^)^IPTK^IPADDRESS_B^^^ 
-r-5o ACLfElt#I3:l041te, <&mmPUBUCKEY3kMMnrtXT?±X=i>-hv*- 
/wy^HACD^WS-r^o fgf£/T^;*1#PgM^i8:l042te, <£HME^» 
CERT_A^-a-^n?)<^||^PUBLICKEY.At:T^-fe^=i^hn— /H;^hACLtcS^L 
Tl&fSf U ^^tLT, ^MIiPUBLlCKEY_AS.U J ^MItPUBLICKEY.BOm^ 
^^■tir^^J-bT— mfcmMtttfbftti-774^~ MPTKW*IPADDRESS_C£.tfJS 
tt1t^ATTRIBUTE.ASrm^li-^ 0 |t^^l044fi, VPN^^T^h^fi 
(A)lOl^VPNy— h^rc^ff(B)103iO^©IKE^3i— Xl^*5(t5^fiE^ffiV>^ 
*iMKEY_AB££j3fc-f5o 
[0057] 013£#i$LT, IHl2OS!j^li!E^|^0J-r6o 

T^-fe^Vhn-^y^HACD^^dBlt)^, VPN^-hr>^^B(B)103« > 
i&Hi^PUBLICKEY.B ^tz.\^<D^^y^HASHB)bT^^>Vx2-- y^J^h 

{ACL)*wftmms)\04\z.m\t^H*7-v7s2i) o w^mm.(S)io4m%^mm 

PUBLICKEY.B (£fcte^: (D^^fiHASH.B) £§f BttttTT^ir^^hcr— ^ 
(ACL)^IH4A > 04BcD^i:L-C|E'ii-t-^o VPN^— h^^fi(B)103£^SLT, 
VPN^7^T>-h^«(A)101d^ibii<f^*(C)lll^IPsech>'^/^— Kf-<t^y^— 

hr^ir^vpN^mfT-rs^, vPN^7-rr>h^e(A)ioi{i, <&mm 

PUBLICKEY_A<b<^§fi|iPUBLICKEY_B (^fcte^tfV^v-a-fitHASI-LB) 
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[oo58] wjtmmsno4iz&\,^x, mm/T?±xmmm'M^mo42tePKW^z$£^x 

YM^*—J**)— ^^(DNS)105^^LTVPNy--h^zii'-r^«(B)103^fiJ^ 
^TbtbfcIPTK^IPADDRESS.B^5l#-r^(^y^S23) 0 Wz.^ f^(S)104(i, 
T^-tr^n^hn-yKACD^B^LT, VPN?-Vy^4mW.(B)io3\z£<Q f gm£tlZ> 

lani lOKmmztitcmm mmioi 1 1 t> s x^fc^^- mptkv* 

IPADDRESS_CS:t) ? Jltt1t^ATTRIBUTE_A^^#i-^ 0 #^=£g(S)104te 
, VPN^^T>'b^e(A)101^VPNy-h^ 3 i^«(B)t^r^O^|I{CffiV^*ii 
«EY_AB^^i-5 0 ^TbT, f+^^e(S)l04(* > WfrmW(,S)104kVPN?74T 

ishmmiA) i o 1 1 <d m<Dmm &£nt m tu vpn^^tv^isca) i o i ^ 

IPADDRESS_B, IPADDRESS.C^.U ; *iiliKEY_AB^^jf -T5C*7^S24) 0 Sfc, 
^^a(S)104« > ^^^e(S)104tVPNy— h^^fiCBHOS^P^jilff^ 
&B£-i§"fbU VPN^— h^^-r^g(B)103^1PADDRESS_AtATTRIBUTEJ\, &T>* 

KEY.AB^iKfi-sc^^^^sas^ 

[0059] sa±, m^K^i-^TJ^cD^mm^m^Rxi^fDmii^mm^m^tc^K 

IPsech7^^-h^-K^fc«h>'^/^--K^J:?,iimS§^Rt-^'fb*-?fe, 
KEY^\B(7)^^fe N .RtF, PKltt1,Z.£%X.50m^<DteMmmnmCEKr_ARTf 
CERT_B^tiE^^oV^T{i > ^H#fCioTJ;<^]^nTV^(7)T% -£Of¥*ffl# 

[0060] *i\ mi4Rumi5^0mvx, vPN^—hv^mwiBnosK^^x&mzfr 
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v\ vpn v-bv^muiBnosteteMmmwwcERT.B&mm u <+^^«(s)io 
4^p ? fliira»cERT.s^^f-r^o vpN?-bv^mm(B)io3n%:mCtctem 

#|EB^#CERT_S^iiE^(CA)106^Pp^V^^-^T, ^IMEI^CERT.SOIEU* 
CERT_B£fgIiE^CA^V ^fc>-frT, <&mmU.W^CERT_B(DjEl,£$:PKW7£iZ 
[0061] VPN^— h^oi^«(B)l03fi, ^v7l30UC%>\,^X9%-%-4b&titcmitffiZm\<^ 

x, T?±x^bv— ^j^HAcD^-r^-xmm 1-5(^^1302)0 witi-mms)! 

04fi, VPN^— h^3i^»(B)103^^^f$tvfcT^-feX3^hn— /wy^b(ACL)^ 
^-T6(^^1303) o ^OgL VPNy-h->^^«(B)103«t{+^S«(S)104 

mi5nwfrmw.(s)io4X(D7?±^i'bv-- /vjxHACDfD&mmmmzm? 

n-TfcSo f4 ] ^a(S)104« > ^TVPNy-h^^-r^fi(B) 103?5^^f £*Wc:T 

umz.&rtUKmmxm\^<&mmtmm cERT_B£#flSLT, 

PUBLICKEY_B^^#i"S(^X5/^°1402) o rcD^fb^M^ 
PUBLICKEY^^X^^HOlT^ffLfcT^ir^rr^hn— yW]J^hACL?rMi$<5{t 
TlBUi-^ (^^^1403) o 
[0062] HH6S.t>*Hl7Sr#ML-C, ft>^tt(S)104#\ VPN^-fT>-h£|g(A)10 

1 tVPN^—b^^mmB)l 03 ^tf>*ii^KEY_AB££j&U VPN^ — 
^B(B)103JdSdt) ^T«btvfcIPTHV^IPADDRESS_B, 3SS(C)111 \Z& lit) 
^fc^-T-<-MPTK^IPADDRESS_C, Xtf, *iiHKEY_AB&VPN^5M'T>' 
h^»(A)101i^f U VPN^^T^h^fi(A)101^fiJi9aTe>nfcIPTFV 
*IPADDRESS_A, M'I4'W$&ATTRIBUTE_A > &t^iI$|KEY_AB£VPNy— 

^«(b)io3 Kmm -tzmm v ^xmw -rs 0 

[0063] IHie^^T, VPN^^T^h^«(A)101i#^^«(S)104« > IPsech^*^ 
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*£V\ VPN ^^T^h^B(A)101f^^#fiE§a#CERT.A^^SL, WfrmWiiS) 
104«^MiiliEBJ#CERT_S?:^f^-?> o VPN^^TVh3£g(A)10mgm 

#CERT_A^|E^(CA)106^Pp^V^^ii:T, <&P^IE^#CERT_A<piEb£3:PKI 

[0064] VPN^^-rT>-h^g(A)l01{i, ^r^Zf\ 501 fc&V^B&^t^ftfciifgg&Srffl 
V ^~C N VPNy — hV^4B9i(B) 1 0 3<D<k|f§^PUBLICKEY_B3ra tr DNS^y QUERY 
^i-^T^fi-5(^^5/7°1502) o ^^fi(S)104(i v VPN^^-fT>'h^«(A)lO 
l^fW^TbftfcIPTKl^IPADDRESS.A, VPN<^— h^^^*(B)103^fiJ>9^ 
Te>^cIPTHV^^IPTHV^IPADDRESS_B> VPN^— h^^^tt(B)103iC ( tl9l : 

mztizLAm loizmwtzrizmm mmcn 1 1 iz$\9 ^ -c^fc^-r^— mptk 

l^IPADDRESS_C£&#U VPN^^TVh^e(A)101^VPNy— h^^^M(B) 
103iO^ B 1cDIKE^(D^fiE^ffiV^^fiiiKEYJ^B%^-rS(^X^1503) 0 Ull 
7f^X2/^1503cDf¥^B^7n— T^fcSo 
[0065] H17^*5V>T, ft^e(S)104fi, £1* % VPN^^T^H£g(A)101#^{f£ 

nfcDNS^^yQUERY^i-^T^muTA^i-r^C^^i/^ieoDo AfiVtt 

DNS^rnyQUERY^#fi^U-C, ^Ig^PUBLICKEY.B^i-^T^^-T^C^s/y 
1602) e ^tbf^MliPUBLICKEY.B^^tC, ^n^M SttttknfcT^-fe 

^.ri^bn— /l'y;*KACL)£1-^T&#i-5(;*X:y:7 P l603) o ^£0^X5/^150 
1 {d^(t^,IKE7^-Xl^iiEM VNfc^|§{fME^#CERT^£#j$L-T, ^M«t 

puBLicKEY.A^-r^TSi^-r^c^x^^ieo^ ^m^u-c^p?^ 

PUBLICKEY_A£r^{dT^-lrx=i>'hn— /UV^HACD^mU Zf?^— MPTK 
WWADDRESSX£$tf#-f-6(^7 L S'-7 c 1605) o ^LT, ^7^— MPTKl"* 
IPADDRESS.C^^^t^tLfc^^J^U^^^ieoe), V ^v£5IPTKu;^&#-C^& 

[0066] ^v-l'^-MPTK^IPADDRESS.C^^^^tbfc^^, fa^»S{^ _L|E 
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^7 L ^160HC^3V^-C^fbfcDNS^^!;QUERY^^V-r^— -M*— ^(DNS)105 
fcfii^UT, IPTKU^IPADDRSSS_B$r^#-t-5(^^^^1607) o 
VPN^7-TTVh^gA(DIPTKl/^IPADpRESS_A^^#-t-?)(^7 i ^7 P 1608) o ' 
KEYj\B&£fifc-r3(*7V:/1609)„ 

T, ^^yi607-e^#bfcIPTPV^IPADDRESS_B. ^s/:7 B 1605-C&#Lfc:7 P 7'r 
HPTK^*IPADDRESS_C, *^s>^1609^£/i£Ub*aittKEYj\B&"r 
-<TVPN^^-TT^b^«(A)101^^f 1-^(^^5/^1504)0 VPNfy-iT^h 
mm(A) 101 £ft>4M£B(S) 1 04«, g^«:$J *f t^ry^l 505) o 
[0067] ft.^ VPNy-h^ S c-r^ff(B)103<t{4 , ^*(S)104«, IPsecb^^tf?— Mr— K 
K£V&WttH^"rv-7\50%) o IKE!7^— XHCjo{j-^mtiE«PKI^-^;^V\ VPN 
y-b^^g«B)103te^iW;^ 

K#CERT_S£5^f 1~6o VPNy-h^^^gCBjlOStt, gff Lfc£;iW#fJE^* 
CERT.S^IIE^(CA)106^Pp1V ^t*£X, ^MME^*CERT_S<DiEL££PKI^ 

^mE^(CA)106^P^V ^t>1tX, '£mmmMmCERT_B<DlE]_,&%PKljf^% 

-oxmrn-tZo 

[0068] ^^tt(S)104ti, ^5/7°1506^joV^TBt#^$tbfcaimS&§rffiV^-C, 

X5/-7°1605(C1*5V >T^#LfcM14tf $&ATTR1BUTE_A > ^^^^^1608^ joV ^"C 
StftLfcIPTK W.IPADDRESS.A, &TJ^<7W^;/7 P 1609tC:fcl ^£j&Lfc*iI^ 
KEYJ\B^i-^TVPN^--h^^-r^S(B)103^^f-r6(^7 i 5/^ 0 1507) 0 VPN^— h 
^^^B(B)103^^^^*(S)104^. ^^^5(^^5/^1508)0 

J^i^^fci^^, *«^I^*3V>T % W^S*(S)104(i, VPN^-h^m^S 
(B)103j;i9^fS$^c, ilff £§*(C)1 1 1 \z* W ^ Tbttfc^^-MPTKi^ 
IPADDRESS.C^lE'lt-r6w^T\ {4^=gg(S)104tt, VPN<7*-h?^£s*(B)103 
fdW&oTV^ D-^^^yT^5/M7-^(LAN)^^4xfcii{f^*(C)lll 
K&W STf)tLfc^7^ MPTKW^IPADDRESS_C££P<5-^T*#5 0 «oT, 
VPN^^T^b^»(A)101«, VPNy-b'> 3 i^B(B)103^U^am^«(C)l 
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^.ipaddress.c^, hTt±xvpmmnirzMtzwftmw:(s)io4{z.m^& 

[0069] *HI0|{Iib : v vC, ft^SS(S)104te N #jI«KEYj\B«r4y£U £fi£Lfc 

*iii|KEY_AB^VPN^7^T>N^©(A)101 ( tVPNy— h^^^tt(B)103(^M# 
^fS-r^ttH«to-C, VPN^7^T^^«(A)101^VPN^— hV^mW:(B)103 
nthK&mmKEY_ABZ%:mX*%Z> 0 t£oT, VPN^^T>^«(A)10l£VPNy 
-h^^^«(B)103mKE7zii-XHvl^^^MliE{CfflV>6*ii#KEY_AB^^ 

^HJS^ij^^oV^T, fa^8(S) 104(3, VPNy— h^zn^«(B)103^mmE 
U MiE^^bfc^^PSt), VPNy-h^^^«(B)l 03£.V)mim£tit^ Mitm 
fi(C)l 1 1 IZ.m'O ^Xhthfc^y^^— MPTKWMPADDRESS.C^ {+^g(S)10 

^e(B)103^)^^f^tLfc:^-r^— MPTK 

W^IPADDRESS.C^PS^IB'ig-C^^o t£oT, VPN^7-f TVh^B(A)101fi, iEL 

VWPN^-h->^-r^g(B)lO3/0^^f$^c^-r-<-HPTKV^IPADDRESS.C 

&%H%Z.btfX%Z> 0 

[0070] *fc, ^HJS^JKl&V^ f4>^g(S)104te, VPN^— h^-f£lg(B)103%igfIE 
U MliE^^bfc^^PSD, VPNy-b^^g(B)103<fc9i£ffi£nfc, iifsig 
g(C)l 1 1 {cm<0 ^Tib;ftfc:^^~MPTKW*IPADDRESS_C£> fa ^£§S(S)10 
4^fEl«i-3£l^tM1^C:JoVvC, #^B(S)104iVPNy-H^rc^g(B)103t 
<^^^ii{f ^Bt^b-r6 0 ^tU^fcoT, fa^8(S)104te\ VPN^-h^^-Y^g 
(B)l03^^^f$tl,fc, iijf^g(C)lll^fiJi9^-C^fc^-r-<-MPrK^ 
IPADDRESSJ^&^A^tLS^&C ;$>o, S]8S$*L3w£ft<gf& t?^5 0 t£oT, 
VPN^M , Ti/h=g«(A)101te, IELV WPNy-hr>^S«(B)103/5^^f $tLfc, 
iifg ^B(C)1 1 1 Km<9 ^ T^^CiEUV -<~HPTK^;*IPADDRESS_C££n 

6^^^T^6iv^5^m^#^?> c vPNy-h>>^-r^«(B)io3«, iift 

S(C)1 1 1 \ZMK) ^ TibtWcIELV ^^-T-<-MPTKl/^IPADDRESS_C^^#^# 
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[0071] £fd, ^HJiMtC*5V^-r, ^^8(3)104^, VPN^^fTVH£a(A)10l£fgfiE 

U*IPADDRESS_B£K^>^— ivtf— /^(DNS)105^P B ^V ^:b-£T$tf#U 
KEY_AB££j&U J&^bfcIP.TK^IPADDRESS.B, iiff ^g(C)l 1 1 ^#J9 ^ Xh 
*LfcIPTKl^IPADDRESS_B, £i&Lfc*»#KEYj\B£^TVPN^-f'T 
^h^«(A)101^itm-r?>o ^tU^oT, 'f*^«(S)104« > VPN^-CT^h^ 
«(A)l01^^$HTV^V^^^PS(9,VPNy-h^^^«(B)103{C#J^)^Tb 
;f^fcIPTKl/*IPADDRESS_B^ Site BUiOU UZ.m^Xhtltc^y4^<— MPTK 
U-^IPADDRESS.C, &TJ^ *ii^lKEY_AB(D-r-<T^VPN^7-fr>'h^tt(A)101^ 
^f-C#5o t£oT, IEUVWPN^-l'T>'h^S(A)l01^PI«9, VPN^— b^^B 
«(B)103£^LT, mitmW(C)lllt\Psecb>^^— FK£&J^-hT?±X 
VPN&mftX%Z> 0 

[0072] ^JSWc^T, #^^fi(S)104«, VPN^^TVh^B(A)101^SvPN 

h^^^M(B)103^fiJ^^Tibnfc:IPTHV^IPADDRESS.B§r^^-r^|55^ 
^LTl^^vM^U 1f PS^LTV^Iil^pg^ VPNy-h?^=j£S(B)l 
03^fiJ"9ST^tl,fcIPTK^IPADDRESS_B^K^-f'^— Ai^— ^^(DNS)105^Pp^ 
W£fcHrrEl#U *i§#KEY_AB££j&U &#UhIPTKV*IPADDRESS_B, il 
-ft ^B(C)lll}C#Jt9^-Cibn^IPTK^IPADDRESS_B, £/&Lfc*i§g| 
KEY_AB^VPN^^T>-h^g(A)101^^f-r?>o rtU^oT, fa^£lfi(S)104 

VPN^-^!>^^e(B)101^#J«9^-CbnfclPTK^IPADDRESS.B^ Mff 
B(C)lll^fiJ«9^Tibtbfci^-l'^— MPTHV^IPADDRESS_C> S.t>\ 
KEY_AB(D-f-<T^, VPN^ i -hT>^^«(B)l03 > &{J^ »{f^a(C)l 1 l^Ufc 
^^CfeT^ir^^iPl^W-r^VPN^^T>'h^«(A)101fclt^mmT#5 o t£oT 
, VPNy-hr>^^«(B)103, ii^f ^«(C)lll^>?J"t-5, 

OIPsecb^vl^E— KKlJ:£y^- hT^ir^VPN^I^JJb-etSo 

[0073] £fc, ^HJSWc&^T, ^^^«(S)104(i > fa^fi(S)104<bVPN^-fT^]> 
^ff(A)101^(7)^(^ii{f ^rBt^i-So itll^ot, f4'^fi(S)104fi > VPN^ 
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— hV^BW.(B)103lt£p\V m XhtlttlPT KV^1PADDRESS_B „ iiff ^g(C)l 1 1 
{CfiliQ^TfetLfc^-r^— MPTKV^IPADDRESS.C, &TJ\ *ii#KEY_AB&& 

t£oT, VPN^-rr^h^a(A)101«, iELV WPNy— h»>^^e(B)103^L-C 
, IELV vffifg iat(C)iil IPsecb^^l^r— KKl£3y^— hT?-tXVPN%nftX 

[0074] £fc, ^I^Wc^T, {*^B(S)104ta, VPN^— h^^^fi(B)103^mSE 
U fgfBCj&^Lfc^&cPS 1 ^ VPN^^T^b^g(A)101^f>J'9^T^nfcIPrK 
l^IPADDRESSD, M'l4if $BATTRIBUTE_A, ,K.l^i§^KEY_AB3:VPNy— h^zn 

4mmB)io3\z.mt-tz>o ^iaot, ^^^g(s)io4« N vpn^— ht^mm 
(b) i o 3mi&m$tix v ^<g> t^ps*9. vPN^-rr^b£iB(A) 1 o 1 9 ^ xbtt 

fcIPTKl^IPADDRESS.A, *aMKEYj\B&VPNy— h^^-l'^g(B)103^ 

5£{f T*£6 0 t£oT, VPN^-rT^h^BAte, jEbVWPNy-h">^-r^e(B)103% 
^LT, ii^f ^g(C)l 1 laPsech^/^— K^ck^y^E— hT?-teXVPN&m?fX% 

C0075] ^ *mmmiz.$o^x, wirmmisno^ vpNy-hr>^^tt(B)io3^miiE 

U miE^^bfc^tcPSO, VPNf^Tl'ymWiAnoilzmV^Xbtltc.lPTF 
1/^.IPADDRESS_A, #ATTRIBUTE_A, S.t/*iiliKEY_AB^VPNy— hV*. 

^a(B)l03{^mi-6tV^51l]^(-^V^T,^4'^ff(S)104iVPNy-h'^7^-r^ 
ff(B)103i:<7)KO^f ^rBf ^k-rSo ^tUCioT, ft^i£ff(S)104te, VPN^^ 
T>-h^B(A)101 ^#JDSTP>ttfcIPTKV^lPADDRESS_A, JSH4ffif$ft 
ATTRIBUTED, &TJ ? *i§WEYDB£1-^T&^$;ft5^ftC J^o, &H&$n 
?.^<t^<VPN^-h^ai^B(B)103tC^f -T?t^, 0 ^oT, VPNy-h^^^« 
(B)103, Mit ^B(C)lllfi, EbVWPN^^T^h^gCAjlOl^, IPsechV 

^7^— K^^^y^-hr^ir^vPN^n^T-etSo 

[0076] ^HJSWc&l vC, {4^^B(S) 104(3:, PKI^^figoT, VPN*9>f 7Vh 

^B(A)10lS.tA^PNy-hr>m^«(B)103^miiE-r5o ^U-^oT, VPN^^ 

r^h^B(A) 1 0 1 <d<& mmmm ♦cert.a^vpn^— h^^scB) 1 03 <D<&mm 
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[0077] ^jb\ ^H^!l^*5Jt6llll2, lllia^-rK^^—Ai^— ^(DNS)105^C:*5V^ 
T^^^PUBLICKEY^^^E^^^^^^^T^yXi^^i^N^i/^ 
HASH.B^ IPADDRESS.B^MiS^ttTWSi-^^, VPNy-h^^^fi(B)102 
(^P^ilPUBLICKEY.B^^^^^^tHASH.B^^b-C^^, /^>^fiHASH_B<t 
IPTKl/^IPADDRESS.B^K^>'^-^^-/^(DNS)105{C^-rtb«J:V\ £/c. 
016^^t _ ^Jll^^5/^ , 15O2^^r?iliPUBLICKEY.B(Dft^cD/N^^^^: 
T/^yXA^J;6^N^iX^fiHASH_B^tfDNS^^yQUERY^^M-r?)wi:^J;i9 

[0078] T^-fe^3>-hn— /vy^hCACDiC^V^T, <£|!l$iPUBLICKEY_A£lPTFV* 

IPADDRESS_C?rll^itTWa-r?)ft^ ( 9^ > ^M#PUBLICKEY.AcD^S^^^^ 
^^^T^=fyXA(Cj;?)/N^V^itHASH.A^IPTKW^IPADDRESS_Ci:Mii#lt 
-Cffatb-Ob&V\ #^Jg^#V\ 1314^1-^0^5/^1302^401^, VPN 
^T>^^g(B)103^||#PUBLICKEY^^^5/^yrI.{ilHASHJ^%^LT^^ 
/N^^jjtHASH_AtIPTKW^IPADDRESS.CSrT^-fe^=i>'hD— /wy^h(ACL)t 

#]li^X5/^ e 1605^|fl|iPUBLICKEYj\(D/N^V^i:HASH_A?:^^cb > /NyJ/ 
^jiiHASH_A^^bTT^-fe^='^hn— ^y^hACL^^^-r^^Jli^^JS-r-S^ 

[0079] VPN^^T^b^B(A)101^«^n— /-^/MPTKl/^IPADDRESS^AO^-^ 

^^ffiv^o- ^/i^nyr^H?— ^LANrtwfiicroX^^— HPTKU'^f'J 
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vxmtsmfo ^1015, *fc, vPN^vh^^^r^o^^biift ^tf 
y^.^aM^^afli#ioi6*sta:rte>tuTv>s 0 

[0080] tf^JBWS^- ^VMOHIUS, 

a) Wlt-V— If Postfix: fMMf— If^^te^tLSK^^* (#J:*.vpn), 

b) f+^-^glPTKU^X^^h^ :#^^S<^IPTKU^ % 

c) fa^^OfgM^CSPKl;^ PKI^, ^l^vV;*^*;^ m& 

[0081] ft^f— «/i!miiEti^-://M015^te, 

b) VPN^^T^h^a(D^-fT^h^liE(7)fcJ6tCflJffl$tt^#«IiE0^»m(SPKI 

mww. PKimmm, '<*v-h\ &mmtt¥) y 

c) wfrmm&v-smmttmfcmmisnzmxmispKmwm, pkito» x 

[0082] h^T^'Zf^h^m^m^—^/v\Qmz.\^ ±^<^x, 
(i) h^/^-fe^hT^^-t-sfcfeo^^sif &u 
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(i) v>*;vttyyTyzf-tz>tz.v><Dmf&mmm®L 

PTKV*) 0 

[0083] B) h^/Vi^^OIPTK^(VPNy— YV^mm^yby— ^hH^tltzI 
C) h^y^O^nh^yKlPsech^v^— K, PPP over IPsecfc^) 0 

o 

a) ^©Nw.I/F<DffiSU (^PPP, ^SUf-ihfeir) > 

b) iK©Nw.I/F<£>IPTKl^ 

c) tf—bV^4, DNSf-w< N WINSf"— ^i^IPTKW;*, 

d) UMNw.l/F^(D/\y—T^^mo 

(1) <D?ib, B) a ^n^TC), D), E) fc&oTfc.fcVN, 

[0084] (2) (BflSiCTB B), C), D)(759^, VPN^— h^^^S^^H]^J^ig^JL^V^(D 

(^^HtvPNy--h^^^So^^^^-e i b®^p-t-n«j;v\) 

TVvSVPNy— b^^^S^IPTKl/^^^V^^^DNS^V^tD^^^ttl 
£*t5(*7^Sl) 0 

DNSKv>^i3r«ffi-ftajS«*!!ltiSB10inJi«t»9— MIE$tb, m 
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[0085] t>U lf^(CHt?5t>OT*fett«, *ODNSlHlVv&i3«*tt, 

f^fflVPN^^T>-h^§Bl012^^$n^ (^^S3) 0 

'. SEif ^-r —://H0 1 5£ffi v N "C^1 SmmE^tt 9 Cxt^S 5) 0 

Jt&#Sr»S(^jx^S7)„ b^y^-^nh^MtJ&WJSx-?' 
/W016^<£>VPN>/>- M>i-f7KM, ^5i^^(^'tt^lEffL.(^x^7 p S8)^ 

7°nb3yV$pi013^>Pi-UTmi-(^X^S9) o 
[0086] h^y^-7°nh3^1013{i N hy^!Jy^-/nh3/l/Mf If- ^/H016Sr 

kzm *f bifll A-Srfey y^-f 5 (^s^S 1 1 ) „ 
h^/V/55iE^(--fe5,hTs/^n5tx VPN^-fT^h^eiOl©^^— HP 

T»^^^^-t^fflVPN^^T^h^^l012^igt-(^^^ > S13) o 
[0087] t^ffiVPN^7^T^h^|gg|J1012{i, VPNb^/KD-fe^hTy^^SiE^ 

v ^^-it^cD^^LT, dnsPb^v i$mjfc®mm& 101 1 mig-t- 

tbS(^7-y^S15)„ Ty"V^— ^3^11, aax&S^VPNh^^SrfilSUT, VPN 
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r±, vpN^^-rrvhgff 101, io2i~xx^mt^mum<D2-^x^, ^wetu 

VPNte, A*?FPfflVLAN121^S^fflVLAN122^fo«9 s vPNy-h->WSSl03 
tt, -f^-^-f^^l23^UTIEEE 802. 1Q VLAN^^#fi>fb^J: l 9{^VLAN121, 
l22yg$E£ft/CV>5£1-£ 0 ^/c, ^^Bl04(d« N ^VPNy-b^ni^«103 

<Dtt£>, lH2o^i-T^-fe^=i>hD— /i^MacU^^t^o— K$nxv^«5 

£1--5 0 r<DACLT*{i, ✓NyS'ak HASHjM CD<&PJ#£^OVPN^^M'T>'N£gl 
01 te, Mt£'li$T(VLAN A*$PVLAN)"^^ X ^fc, /^>^{jtHASH_A2<D^§fl 
|i^'boVPN^^T>'h^ei02«, M'ttlf $T(VLAN ^agPVLAN)"^o < b^ 

[0088] m2iK*nmmztetfzvpN?-hv^mmi03(Dmmmj&m*7f;-f o vpn^ 

-h^^^ffl03^«,^^^«104t^iim-^S^T5^f-— t^fflVPNy 
-^^^1^031^ m£fc<OVPN^7^TVB^^ 

, VPN^-fT^HgglOl, 102^#h>-^W£|ll^5flt;&WStlf «Srf%«p i-Sh 
l/Jf • b=vMt/&1?ax— ?VM036t v VPN^— h^a^g* 1 03^^^ 
5#VLAN^Mi-^^Wffi'lt#^^t-^VLAN«^cWS^-^1037^^^ 

[0089] ^ffl«a^— ^/vio34fcw^ffli-5#^S6iirfcfc«Tol»«^ 

b) #^^etwiBiE^S;(sPKi^S;, pki^^;, ^u^Su^is^^ m& 
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)o 

[0090] a) VPN^-h^ai^g(D^fE<^fcfe^flJffl$H-5#SIE0^#« (SPKIflEP^*, 

PKimmm, '<*9—h\ &mmtet*) 0 
h^y>-^-^Ph^^«^Wa^— T'Vuose^fivpN^^T^hgat^h^ 

[0091] b) b^y>-^<D^nh3^(IPsechV^y^— p\ ppp over IPsecft£0 o 
c) f&SE-Bt^b^CSPKll;!^ pki#5£, ft^^^^^y^^^;, 

) 

f) H>^/l^^£tb6VLAN£ffc 0 "A*£BVLAN\ "MSlHSVLAN"^ 
[0092] g) VPN^-f T>-Hgl® t£&V ^^Tfc^^-MPTKW* (VLAN#J&W3S 

VLANffj^WS^— ^VHOST^fiVLANrt^^^-^VLANrct^^T^if^^ 

a) VLAN£^("A*g|SVLAN\ "g^FPVLAN'V^Oo 

b) VLANCD^5/h!7-^^Wa'tt# 0 

hVz^fs DNS-tf— ^ WINS-y— /^^ifOIPTK^ 0 
[0093] ii) VPN^^TV^tt^oifcl-rS^— ^-f^if #o 
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GfeU VPNT^ir^^gjfcSrW-r (^^Sl-S3) 9 ^^Sl04{^ #J;ttf 

vPN^-rr^higgioi^fiE-r^xb, vpn^— h?^r§£fiio3K:*j-u vpnt^ 

^ft^il&SrfT? (^^7°S4) 0 ii^Plt#(VPN^7-rT^b^Sl0i(DIPTKl/^ 
IPADDRESS.AK *iMKEY_AB, JStelf $ft ATTRIBUTEjU&if) te, h^U^- 

VLAN121^Sjfc3£$tl/, j e^VLAN^rA*$BVLANjt>> l©f-^fcft*!lSil5 ( 
XTV7S5) 0 Z.<DWi&. E120^I9, VPWryJT^VmmiOin, (VLANATO 
VLAN) COMtttf #^o^i:^ii^q$^6o ££oT, VPN^^T^h^©101/?»^(D 
h>-^£l&^1-5VLANte, "A*lH$VLAN"i&:^£;Jx5o 
[0094] VPN^^T^h^BlOl^^^VPNb^/Hr^hTy^^^^tii^tbSi (T^ry? 
S6h Y^^T^-^x2Y^;vmmmm^-^;Vl0Z^^mL.X{^y^S7), ffife 
<^MIiE-^^b^tTofc^.^i-5VLAN121^VLANt»^l : S^-^Vvi037Sr 
#R^(^'7 i !y7 0 S8)LT^ VPN^^T>'h^Sl01{^AV^dbbpItfe^'7 P 7^''<'— MP 

DNS, WINSI^— ^^TK^&^)tt^£, VPN^^T>-h^«101^ii^^-?, 
0 VPN^9^T>hS«101O^^-<-MPTKW^fi, A*£BVLANOT 

[0095] VPN^^T^hlgaiOl^^JilSh^/^ab-CVPNfpItt^— 

?v^y&mm7£vx-b£\, \ vpN?7^T>-hmMio2frb<Dm&hmmfct!!! ! m't 

■So 
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&>±.m.wvtc£o\^ z.<D&m\z£tii£, wjtmwizis^x, ip^yh^-^mm 

[0096] ^^fitt, VPN^^T>-h^«^^VPNy— b^^^g^fiJO^T^tv/cIPTK 

T^tbfcIPTKu^^mi-51#PS^i-^^^d^^liE-r5o ^bT, ftPI^-T 
5»^^RR«9, T^-fe^^Hn— 7HJ^h^#^bT, VPN^— h^^^BiCtfJWa 

IPT K^&tA/PN^^T^-hSewJRttffif $ft£Bt#U K/^y^-At-/< (DNS 
) ^^b-CVPNy-h^^-r^a^fiJi9^Tfe^IPTKV^^^#L, VPNi^-fX 
^h^e^VPN^-h^^^g^^raoiKE^omtiE^fflV^*5i«i^^-t-5o 
&t-> #^Mgg^VPN^7-rTVh^giora^ii^f SS^rBf ^kb-C, VPN^-}^ 
^tt^#J^^TbtLfcIPTKl/^,aff^e^fiJ^^T? ? ^c^ 0 ^-<--HPTHV 

^Xt^^^b^^iiftt^vpN^^r^h^etj^ti-So fa^etvPN^ 

K^,^bfc*3iSi^W7^T^h^«<^«ttjf^^vPNy— h^^-r^ff^^ 

tSIt-e, ^^S^-r^-MPTKi/^^om^iim^e^HiS^^-Sri:^ 

■e#s 0 fcfcaifcf % ^il^tpttmrtiAittcD^fcocDiim^tt^vPNy-h^^^ 
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[0097] *fc, SPKI^^^oT, VPNfy^T^ymW, SW, VPN^— h** 

-Y^fllSrStE-t-So VPN^^fT^H£gte, SPkl#5S;fc:*£oTiiEW*H8fT 
•fSo £<b&-> fa^&iPKI^xU^oT, VPN^^T^h^S, VPN^— h 

£fc, ft^Sttfi, ^mm, FQDN (Fully Qualified Distinguished Name), GUID( 
Globally Unique Identifier) , MAC TKW*. SPKI (Simple Public Key Infrastructure) 
Local Name, X.500 Distinguish Name#tfX£lcCD£ wiJ&^K'&oXVPNPy^Tl/h 

mm* vpNV-ht^mm. &t>\ mmmm^mm-r^t^mt-r^ zLtucx 

ot, IPsec, L2TP&^OteE<^h^y>'^nb=i/K PKI, SPKI, K&W 
[0098] ±5zSLfc*mMl7!;MllffiM4T^Ufc^^A^*5tt5 i §-^ttO— gBt>L<tt^ 

m^x^nLx^mm^mm-r^t^x^^t. &svm3, mmmi^mmm2x 
^vtcfammw%^t o ^—?(D^vy7j*xm!&u ^^/om^yta-^ 
izmn&&z>^b&xzz>^btemo*xht£\< \ ^>^^-^x^(D^mmm^mm. 

^v^s ^<v^>-K°^?tim&m^mtenzmmfc, fd, mo, rom 

% h\ CD, DVD, y^-/^^y=V^^if^lE^LT, ^#Ui<9, H^L- 

mmi,tc<9'rz>zk&-*jmxhz> 0 
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wimrnxm, 

(c) ttiflBVPN^^T>'h^@^^<7)^*lC^^bTtfj|aVPNy--h'>^-t'^B^^3- 

wsD^^-HPTvu^&m^u mmvPNt^T^hmm^mztm^ mm? 
^-rr^higs^iPTKi/^^HuiBvpN^— hv^mmzmv^ mtzvpNty^r^h 

ib Km v ^mKMmm $b&£j&u mmvpn^^r^hmmtmm^-h^^m 

(d) mmnKmmmm^m^^xmmwPN?^r>-ymmtmm^-h^^mmm 
itmm<D794^—hiPT\?ux%&^xy^—hT?±*%mn-fz>TMim.. 

[2] If^^llB^^yqE— hT^-fe^VPN^^^"^(-*5V^T N BtiffiT^-fe^^n— ;V 

yxhimmvpN?7^T^hmw\mttm&mmz-£fr 0 
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[5] ■ «*^2X«3|5tt^y^-hT^ir^VPN{4'^^rfe^*5V^ > tulSig@(c) 

(c-0) StllSVPN^^TVh^tt^^gflEVPN^-b^^^tt^fii^^TbttfcIP 

(c-1) T^i^=^hn-^y*h£#J$LT, ®^«{cfiJ«9^T^/c^^-h 
IPTK^^r5l#-t-5jim^, 

(c-2) h*M>*—j*v—/<%mmvxvpN?—hv^mw^mv^xbtitciPTv 
(c-3) ^^eivpN^^-rr^b^at^am^^Bip^bbT, vpN^f—b^^m 

S^IPTK^S^iim^e^7 P 7-f-<--hIPTHV^SrVPN^^T>'h^g^^f 

(c-4) #^BiVPNy— b^^mWit(DmiB SStrBt^bbT, VPN^^fT^b^ 
M(D^n-/^/WPTK^^^.^T^ir^3^hP-/vy^h^|54fe$nfcVPN^^T>' 
N^*^Mi-^MIEMtttf^^VPNy-h!>^^^a{c^f'1--5iiia> 
<t£r^, lulBig^(d) 

(d-l) VPN^^T^h^S^VPNy-h^^^«i:<D^(7>^|iE^fflv>5tij|Et@S 

(d-2) #^S«i:VPN^-rT^h^tttO®{f {^^Blf^bb-C, VPNy-h^^^ 

e^o^s^iiE^^g^if^^vpN^^T^h^s^^f-rsiiair, 
(d-3) <*frmmkvpN<y-hv^mw:t(Dmm ^nf-i^bur, vpn^^t^hs 
mk<DftKMmz&mtemm&vPN7-hv^mwizmm^z>T®u, 
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6^<b, VPN^^T^h^S^Pi-^tulBMttffi^tC^^V^TllX^t-^yLAN, 
HJ^TKW*, F*l£BDNSTKw^ WINSU — /^TFV-^ &£«rifej£"t : saif&£ 
" \ lififEMttW^tdg^Tii&fEVPNy— b? ^mw&'^vby 4K9Ts?WS&k 

m£^vmMm$ffij£<D\%mmm\stcm&\^ h^/no^y— xry^a-a, vpn 

[7] ff *^2X«3|Hic^y^-fT^-fe^VPN#^jSfe{CfeVNT > Aft1Bifi@(c) f*. VPN 

[8] Mf#*59B«W>y^~ hT^ir^VPNfa^Sfc^l ^T, fliTlBiSS(c) tt, iufE 

fcteOVPN^^T^h^S^Mia^^^S^^fUT, StTlBVPNy— M^*^igfll^ 
[9] IP^ybI7— ^tCVPN^^TVh^iSSWPNy— h^*>T3S«A5g|jj^$tt, VPN<7* 
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tufEvpN^-h^a^^ib^m^ 

ACLfElt#|S±, 

tuiavPN^^r^h^fi, striae- h^^a^fgiEu TT-^mmm^ 

mmTy--tx^hv-^})xb&0Mi,x^ mt&mmmmm^mxibtbtc^^ 
-biprv\y^m^uvM^—^-^mmvxmmvpN^f~b^^mm. 

fulEVPN^^T^h^SiMIBVPNy-h^^S^ 

m^9^-Hprvu^Rnm^.ms.mmmm^mmu ambvpn*'— h**>r 
%kmz> mmvpN^^r^hmm^iPT^u^Rx^mu^mumm^mm-r^ 

[io] it &mmm<DWfrmmz&\,^x, mmmm^&n, wfrmmtvpNy-^r^b 
mmt<Dm<Dmm. n^mtwpN^-b^^mmt<Dm<Dmm zti^thm^- 

en] it ^mm^^-mmi^^x, mmmm/T?±xmmm'M^&ite. mm 
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[12] . m^m9mm<D^mm^^^x,mmmmxr^±^mmmm^nmt&ypN 

#^(cMbttj|EVPNy-h^W^S(cfiJ^^T^^IPTKl/^^K^>'^--A 

it fft&3u&£-fr, suiEiim ^^^j-b^tbfciPTKv^, mvmmmm^m^x 

, ifiiEvpN^-h^^^g^miiEL. mmK^Ltcm^m, mtzmit^mz 

zmftvpN?-by^mwtz.mm£^-z> 0 
[14] it &m97smi3<D\,^nfrKmmowfrmmz&^x, mwmu/r^^m 

M^P^Ifcte, SPKI (Simple Public Key Infrastructure) ^xU^oT, Sfj|EVPN^7 

[15] fjt3fcgc97!;Mi3<Dvvf n^Kum<Di^mm^^^x^ mmmm/T?-txm 

mmffl^&te, PKI (Public Key Infrastructure) ^^i;«ot, [IfJfBVPN^^T^b 
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( was ) 



1201 
1202 

. 1203 



DNSC7X UQUERY tiiHgiPUBLICKEY_AS 



DNS^XUQUERYS^KBUT* 
'/i^PUBLICKEY.BSIXifTS 



i25HfilPUBLICKEY_BICll51WI^6n/c 



1204 
1205 
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SPKI753C 





awe 



1207* 



YES 



#B8UT, DNS^XUGUERrS^TS 
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(acl 

[{entry I 

i (subject hash sha 1 |HASH_A|) I 

| (tag(dnsK^^V^-A+t-/\'DNS(CSBn (hash sha 1 |HASH_B|)) J 

, (iplPADDRESS_C) I 

(attribute ATTRIBUTE.A)) I 

I (propagate) 1 

j (validity(not-before^$ij5F— ^ Xnot-aftere^y^— $ )) | 

Ij ; : ; 

) 



[IH9] 



I 1 

! (tag(dns P^-f V*-Att- A"DNS<D€H0 (hash sha 1 |HASH_B|))) ! 

I _ ______ _ _ J 



[mio] 



(cert 
(issuer Seif) 

(subject (hash sha 1 |HASH_A|)) 

(tag(dns ^-Atr-M'DNScDglT! (hash sha 1 |HASH_B|))) 
(propagate) 

(validityfnot-beforeBiSOT 1 — s> Knot-after gf^y^— $> )) 

) 



! 1 &mmm : 7 : -5>TAG£is-cmm<*ri2> : r-2 
i > 

CB1 O 
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(cert . 
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(signature M£> ) 
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[HI20] 



(acl 



, (entry I 

(subject hash shal |HASH_A1|) \ 
I (tag(dns K*-f >*-Atr-MDNS<DSiTl (hashshal |HASH_B|)) j 

! (iplPADDRESS_C1) I 

I (attribute(VLANAP§iJ VLAN))) 1 
i (propagate) 

I (validityfnot-beforeet^fl^— • 5> )(not-afterB§giJ5=— 5? )) 1 



} (entry 

! (subject hash shal |HASH_A2|) 

| (tag(dns PX-ty^-AV-JWUScD&m (hash shal |HASH_B|)) 

j (ip IPADDRESS_C2) 

! (attribute(VLAN m£B VLAN))) 

i (propagate) 

1 (validity^ot-beforeB^y-^— < 5> )(not-afterB§giJ:r— S )) 
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